CVE-2017-1002000

CRITICAL 9.8CVE-2017-1002000 · Published 14/09/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
mobile-friendly-app-builder-by-easytouch mobile-friendly-app-builder-by-easytouch_project	`= 3.0`	No fix yet

Description

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content.

References

securityfocus.com/bid/96899 · Third Party Advisory
securityfocus.com/bid/96905 · Third Party Advisory
vapidlabs.com/advisory.php · Exploit
wordpress.org/plugins-wp/mobile-friendly-app-builder-by-easytouch · Not Applicable
exploit-db.com/exploits/41540 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free